Translate

Network Blogs

A security research team found a new malware called “Cryptolocker ransomware” that has infected more than 200000 PCs by stealing over £600,000 in Bitcoin. According to Dell Secure Work’s counter-threat unit the malware is developed in Russia or Eastern Europe. In fact, the infection has started earlier in September 2013.

Ransomware is a new type of malware that locks away essential files on a victim’s PC. The malware aims at mapped drives, Dropbox files, and all locally connected, network attached, or cloud-based storage. The files remain locked until victim fulfills the demand of payment within 72 hours.

The concern about this malware is antivirus programs cannot remove it. Even if the victim wishes to root his PC, he cannot gain access to those encrypted files located on Cryptolocker servers. The victim can access files only if he pays the ransom amount.

According to Secureworks, the author of Cryptolocker ransomware has made strong software by using a third party certificate issued by Microsoft’s CryptoAPI. The certificate carries 2048-bit RSA public key, which is also approved by CAB forum and all leading web browsers. The author has put FAQs section for answering to question on online forums.

According to Secureworks, this malware has infected almost 250,000 systems in the first 100 days since its inception.

It is believed that the author of this malware has demanded $300 to decrypt files of victims, which were initially at $100. Cryptolocker ransomware can also increase though social media hyperlinks that seem malicious and spam mails.

Finally, if we count evolving malware, the hackers are now reaching on advance level, and the time has come to make aware innocent people who blindly trust cyber world. Hackers are always in search of such users who are not still aware about rising cyber crime. There are a number of antivirus makers are now working on this ransomware but it feels that it is not an easy task. It is sensible to update your patches and update your PC released by Microsoft to prevent from such ransomware.